Spring Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Paloalto Networks
PSE-Prisma Cloud Professional
PSE-Prisma-Pro-24
Palo Alto Networks System Engineer - Prisma CloudProfessional Questions and Answers

Pass the Paloalto Networks PSE-Prisma Cloud Professional PSE-Prisma-Pro-24 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam PSE-Prisma-Pro-24 Premium Access

View all detail and faqs for the PSE-Prisma-Pro-24 exam

Go to Exam

720 Students Passed

93% Average Score

96% Same Questions

Viewing page 2 out of 4 pages

Viewing questions 11-20 out of questions

Questions # 11:

All Amazon Regional Database Service (RDS)-deployed resources and the regions in which they are deployed can be identified by prisma Cloud using which two methods? (Choose two.)

Options:

Configure an Inventory report from the "Alerts" tab.

Write an RQL query from the "Investigate" tab.

Open the Asset dashboard, filter on Amazon Web Services, and click "Amazon RDS" resources.

Generate a compliance report from the Compliance dashboard.

Answer

B, C

Questions # 12:

Which statement applies to optimization of registry scans with version pattern matching?

Options:

It requires Linux images to rely on optimizing registry scans due to various Linux elements.

It is only necessary in registries with tens of thousands of repositories and millions of images.

It is best practice to always optimize registry scans for faster results.

It is rarely successful in the Windows Operating System (OS).

Answer

Questions # 13:

Match the query type with its corresponding search

Question # 13

Options:

Answer

Answer:

Explanation

network where,

event where,

config where

Questions # 14:

What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

Options:

run the PAN-OS CLI command: set system mgmt-interface-swap enable yes

run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes

create a bootstrap file that includes the mgmt-interface-swap command

in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value

Answer

C, D

Explanation

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-the-vm-series-firewall-on-google-cloud/management-interface-mapping-for-google-internal-load-balancing.html

Questions # 15:

What configuration on AWS is required in order for VM-Series to forward traffic between its network interfaces?

Options:

Both Source and Destination Checks are disabled

Both Source and Destination Checks are enabled

Source Check is disabled and Destination Check is enabled

Source Check is enabled and Destination Check is disabled

Answer

Explanation

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/use-case-secure-the-ec2-instances-in-the-aws-cloud

Questions # 16:

Which subcommand invokes the scan for images built with Jenkins in an OpenShift environment?

Options:

> twistcli project scan

> twistcli scar, projects

> twistcli hosts scan

> twistcli scar, hosts

Answer

Questions # 17:

Which configuration needs to be done to perform user entity behavior analysis with Prisma Public Cloud?

Options:

Create alert rules.

Whitelist IP addresses.

Configure User-ID.

Define enterprise settings.

Answer

Explanation

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly-policies.html

Questions # 18:

What is the Palo Alto Networks recommended setting for the Prisma Cloud Training Model Threshold?

Options:

Low

Thorough

High

Baseline

Answer

Questions # 19:

A client has a sensitive internet-facing application server in Microsoft Azure and is concerned about resource exhaustion because of distributed denial-of-service attacks What can be configured on the VM-Series firewall to specifically protect this server against this type of attack?